[Git][security-tracker-team/security-tracker][master] CVE-2021-42392,h2database: Link to fixing commit
Markus Koschany (@apo)
apo at debian.org
Mon Feb 14 17:02:07 GMT 2022
Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0961e60f by Markus Koschany at 2022-02-14T18:00:14+01:00
CVE-2021-42392,h2database: Link to fixing commit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23443,6 +23443,8 @@ CVE-2021-42392 (The org.h2.util.JdbcUtils.getConnection method of the H2 databas
- h2database 2.1.210-1 (bug #1003894)
NOTE: https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6
NOTE: https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/
+ NOTE: Fixed by https://github.com/h2database/h2database/commit/41dd2a4cf89da9dd18239debbf73f88da6184ec7
+ NOTE: https://github.com/h2database/h2database/commit/956c6241868332c5b440f5d55ea8fdc1e51ae4fd
CVE-2021-42391
RESERVED
CVE-2021-42390
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0961e60f951ffe50cf2a61e66dc5dfa136c0a41c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0961e60f951ffe50cf2a61e66dc5dfa136c0a41c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220214/fe41aa61/attachment.htm>
More information about the debian-security-tracker-commits
mailing list